PingID Integration for Windows Login prior to 2.4.2 allows local users to gain privileges by modifying CefSharp.BrowserSubprocess.exe.
pingidentity pingid integration for windows login